Data protection declaration according GDPR for the web sites of Schmidtsbrauwerk GmbH & Co. KG

Responsible in the sense of data protection law and in particular of the EU General Data Protection Regulation (GDPR) is: Schmidtsbrauwerk GmbH & Co. KG

Your rights as concerned person

You can at any time exert the following rights using the provided contact of our data protection officer:

You can revoke your consent at any time with immediate effect.

You can always appeal with objections to a supervisory authority, e.g., to the responsible authority of the federal state of your residency or the authority which is the responsible office for us. A list of supervisory authorities with contact details is maintained at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Gathering of general information on visit of our web site
Kind and purpose of processing:

When you access our web site, i.e., when you do not register or otherwise submit information to us, information of a general nature is automatically gathered. This information (Server-Logfiles) contain for instance the kind of your web browser, the operating system, the domain name of your internet provider, your IP-address and similar data.

This information is processed in particular for the following purposes:

We do not use your data to draw conclusions about you as a person. Information of this kind is statistically evaluated, where applicable, to optimise our internet presence and the technics behind it.

Legal basis:

The processing takes place in accordance with art. 6, par. 1(f) GDPR, based on our legitimate interest in improving stability and functionality of our web site.

Receiver:

Receivers of the data may be technical service providers who act as data processors for operation or maintenance of our web site.

Storage period:

The data is deleted as soon as they are not anymore required for the purpose of their elicitation. For data which serve the provisioning of the web site, this is generally the case when the corresponding web session is ended.

Provisioning mandatory: or necessary:

The provisioning of the aforementioned personal data is not mandatory, neither legally nor contractually. Without IP-address, however, service and functionality of our web site are not ensured. Moreover, particular services may not be available or may be limited. For this reason, an objection is excluded.

Registration on our web site
Kind and purpose of processing:

Upon registration for use of our personalised services, some personal data is collected such as name, address, contact, and communication data (e.g., phone number and e-mail address). If you are registered with us, content and services are available to you which we provide exclusively to registered users. Registered users also are provided the possibility to change or delete their personal data if needed at any time. Of course, we shall inform you about your personal data stored with us on request.

Legal basis:

The processing of data collected at registration takes place based on users’ consent (art. 6, par. 1(a) GDPR). If the registration is conducive to fulfillment of a contract of which one party is the person concerned, or to the execution of precontractual duties, then art. 6 par. 1 (b) GDPR is an additional ######Legal basis for the data processing.

Receiver:

Receivers of the data may be technical service providers who act as data processors for operation or maintenance of our web site.

Storage period:

Data is processed in this context only as long as the according consent is effective. After that, they are deleted, unless barred by legal retention obligations. To contact us in this context, please use the contects provided at the end of this data protection declaration.

Provisioning mandatory: or necessary:

Provisioning of the data is voluntary, and only based on your consent. Without provisioning of your personal data we cannot give you access to some content and services.

Delivery of chargeable services
Kind and purpose of processing:

To deliver chargeable services some additional data is requested, such as payment details, in ordert o execute your order.

Legal basis:

The processing of data necessary for contract conclusion takes place based on art. 6, par. 1(b) GDPR.

Receiver:

Receivers of the data may be service providers.

Storage period:

We store these data on our systems until the legal retention periods expire. The retention periods generally are 6 or 10 years for reasons of orderly accounting and taxation.

Provisioning mandatory: or necessary:

Provisioning of the data is voluntary. Without provisioning of your personal data we cannot give you access to some content and services.

Commentary function
Kind and purpose of processing:

When users leave comments on our web site, apart from these statements, the time of their submission and the user name previously chosen by the visitor of the site are stored. This facilitates our security since we may be arraigned for illegal contents on our web site even when they are created by users.

Legal basis:

The processing of data entered as a commentary takes place in accordance with art. 6, par. 1(f) GDPR, based on our legitimate interest. By offering a commentary function we want to allow for a simple interaction. Your information is stored to process your request and for possible follow-on questions.

Receiver:

Receivers of the data may be service providers.

Storage period:

The data is deleted as soon as they are not anymore required for the purpose of their elicitation. this is generally the case when the communication with the user is concluded and the company can infer from the circumstances that the issue in question is conclusively resolved.

Provisioning mandatory: or necessary:

Provisioning of the data is voluntary. Without provisioning of your personal data we cannot give you access to the commentary function.

Newsletter
Kind and purpose of processing:

Your data is exclusively used to send you the subscribed newsletter via e-mail. Your name is collected in order to address you personally in the newsletter and to identify you in case that you want to exert your rights as a concerned person.

To receive the newsletter, submission of your e-mail address is sufficient. Upon subscription to the newsletter these data are used exclusively for this purpose. Subscribers may also be informed via e-mail about circumstances which are relevant to the service or the subscription (e.g., changes of the newsletter offering or technical circumstances).

To effect a subscription, we require a valid e-mail address. To verify that a subscription is actually performed by the owner of an e-mail address, we use the „double-opt-in“-method. For this, we record the subscription, the sending of an e-mail requesting confirmation thereof, and the receipt of the concerning answer. Further data is not collected. The data are used only for sending the newsletter and are not disclosed to third parties.

Legal basis:

Based on your express consent (art. 6 par. 1(a) GDPR), we send you our periodic newsletter or similar information via e-mail to the provided e-mail address. You can revoke your consent to storage and usage of your personal data for newsletter subscriptions at any time with immediate effect. Every newsletter contains a link to this end. In addition, you may unsubscribe directly on our web site or inform us about your revocation vie the contact provided at the end of this data protection declaration.

Receiver:

Receivers of the data may be service providers.

Storage period:

Data is processed in this context only as long as the according consent is effective. After that, they are deleted,

Provisioning mandatory: or necessary:

Provisioning of the data is voluntary. Without provisioning of your personal data we cannot send you our newsletter.

Contact form
Kind and purpose of processing:

The data provided are stored for individual communication with you. For this, provisioning of your name and valid e-mail address are necessary. This facilitates the assignment and subsequent responding to your request. Provisioning of further data is optional.

Legal basis:

The processing takes place in accordance with art. 6, par. 1(f) GDPR, based on our legitimate interest. The contact form provides a simple means of contacting us. Your information is stored to process your request and for possible follow-on questions.. If you are contacting us in order to request an offer, processing of data entered into the contact form takes place for the execution of precontractual duties (art. 6 par. 1 (b) GDPR).

Receiver:

Receivers of the data may be service providers.

Storage period:

Data is deleted 6 months from the processing of the request at the latest. Insofar as a contractual relationship ensues, we are bound to legal retention periods according to general commercial law. Data is deleted after expiration thereof.

Provisioning mandatory: or necessary:

Provisioning of the data is voluntary. Without provisioning of your name, e-mail address, and the reason of your request, we cannot process your request.

Usage of Google Maps
Kind and purpose of processing:

On this web site, we may use the services provided by Google Maps. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (henceforth „Google“). Thereby we can display interactive maps directly in the site and allow you a comfortable usage of the map functions. Further information about data processing by Google can be found in the data protection policies of Google. In the data protection center on the Google site you can also adjust your personal data protection settings.

Extensive manuals for the management of your own data in the context of Google products acan be found at http://www.dataliberation.org/

Legal basis:

Legal basis for the incorporation of Google Maps and the data transfer to Google linked to that is your consent (art. 6 par. 1(a) GDPR).

Receiver:

By visiting our web site, Google obtains the information that you visited an according sub-page of our site. This happens independently of whether Google provides a user account for you on which you are logged on, or whether there is no such user account. If you are logged on with your Google account, your data is automatically associated with that account.

If you do not wish this association to be made, you need to log off from your Google account before activating the map function. Google stores your data as a usage profile and uses it for advertising, market research, and/or demand-actuated shaping of their web site. Such an evaluation takes place in particular and even for users who are not logged on to provide needs-based advertising and to inform other users of the social network about your activities on our web site. You have the right to object to the formation of such user profiles. To exert that right you have to refer to Google.

Storage period:

We do not gather püersonal information by the embedding of Google maps.

Transfer to non-EU countries:

Google processes your data in the USA and conforms to the EU_US Privacy Shield. https://www.privacyshield.gov/EU-US-Framework.

Withdrawal of consent:

If you do not want Google to collect, process, or use data through our internet presence, you can deactivate Javascript in your browser settings. In this case, use of our web site may be restricted.

Provisioning mandatory: or necessary:

Provisioning of the data is voluntary based on your consent. If you prevent access to your data some functions oft he web site may be impeded.

Embedded YouTube videos
Kind and purpose of processing:

Some of our web pages may contain embedded YouTube videos. According plugins are operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (henceforth „YouTube“). If you visit a page with an embedded YouTube plugin, a connection to YouTube servers is established, informing YouTube which page you are visiting. If you are logged in to your YouTube account, YouTube can associate your web surfing behavior to you personally. You can prevent this by logging off from your YouTube account first.

If a YouTube video is started, the provider uses cookies to gather information about the user behavior Further information about purpose and extent the data collection and processing by YouTube can be found in the data protection declarations of the provider. There you may also obtain further information on your corresponding rights and how to adjust your privacy settings.(https://policies.google.com/privacy).

Legal basis:

Legal basis for the incorporation of YouTube and the data transfer to Google linked to that is your consent (art. 6 par. 1(a) GDPR).

Receiver:

Access of YouTube automatically initiiates a data connection with Google.

Storage period:

If you have deactivated the setting of cookies for the Google-Ad-Program, you will not incur such cookies when watching YouTube videos as well. YouTube however, uses also other cookies to store not personally identifiable information about service usage. If you want to prevent this you have to deactivate storage of cookies altogether.

Further information on data protection with YouTube is found in the data protection decalration of this provider: https://www.google.de/intl/de/policies/privacy/

Transfer to non-EU countries:

Google processes your data in the USA and conforms to the EU_US Privacy Shield. https://www.privacyshield.gov/EU-US-Framework

Provisioning mandatory: or necessary:

Provisioning of the data is voluntary based on your consent. If you prevent access to your data some functions oft he web site may be impeded.

SSL encryption

To ensure security of your data in transfer we use the encryption methods according to the current state of technology, e.g., SSL in HTTPS.

Change of our data protection policy

We reserve the right to change this data protection declaration in order to always conform to current legal regulations or to implement changes of our service in the data protection declaration, for instance upon the introduction of new services. For a new visit of our site, the new data protection regulation then applies.

Questions to the data protection officer

In case of any questions regarding data protection, please write us an e-mail refer directly to the person responsible for data protection in our organization at: info@braufuchs.de